search

ForensicArtifacts / artifacts

Digital Forensics artifact repository
Apache License 2.0
1.06k stars 206 forks source link

Add Windows Subsystem for Linux Profile Files #385

Closed Karneades closed 4 years ago

joachimmetz commented 4 years ago

@Karneades why not make this part of UsersShellConfigs (https://github.com/ForensicArtifacts/artifacts/blob/d5bf9a91e4f34d3869b481cb5e46da6c2773d26b/data/unix_common.yaml#L202 ) ?

Karneades commented 4 years ago

Should we place it in the file for the host system where the artifact is found (on a Windows system) or where the target artifact is stored (Linux subsystem)... I'm unsure. The same goes with Git for Windows (bash etc.).

We must add the label Windows to the UserShellConfigs though and I'm unsure whether people whould search in the Linux or in the Windows file when searching these paths. Outside of GRR where the label is used.

However, It's good to have at least all the same paths like for the current UserShellConfigs also for the WSL.

Karneades commented 4 years ago

I didn't find the artifacts for Git for Windows, though we could add these too, same situation there. And the same paths with the current shell configs can be used.

Karneades commented 4 years ago

Move the part to unix common and therefore we cover now Git for Windows and WSL.

Is somewhere a hint needed for WSL so someone searching for WSL would find that artifact?

joachimmetz commented 4 years ago

@Karneades thx, I'll try to have a look later today.

joachimmetz commented 4 years ago

@Karneades I've made some changes to split the WSL paths into a Windows specific source types.